maxgashkov

298 karmajoined hace 10 años

comments

hace 7 horasdiscuss

I've settled on using .internal and Knot as a authoritative NS, step CA + ACME to issue short-lived certs, and a Split DNS resolver from Tailscale as the only external dependency (mostly as a convenience for when I'm on the road).

I do have a luxury of all the homelab VMs being rebuildable via IaC, so I've just injected CA trust at that step.

The biggest PITA so far were 3rd party docker images, each with its own way to inject custom CA.

iOS devices were surprisingly easy to handle.

[dead]

hace 9 díasdiscuss

> requirement is zero ai used

don't ask people to lie to you

hace 10 díasdiscuss

There are degrees to "AI contributors". E.g. recently I have stumbled upon rare edge case in an OSS tool written in Rust. It would have taken me a week+ to be able to contribute a minor change in a clean and Rust-idiomatic way as this is not the language I'm proficient in, and Claude did that in 1 hour, with 3 or 4 rounds of tweaks from me to reduce the walls of text and make the contribution matching the of the original project. Alternative was just swiping it under the rug or opening an issue instead (thus placing the burden on the maintainer).

I do think I helped out.

And I have discovered this edge case when fiddling with my homelab which is my hobby.

hace 16 díasdiscuss

Lexa (to be more precise, Lyoha) is a shortened version of Alexey (Aleksei); but if it wasn't reserved for that, Lyoha sounds a bit rude (and a more gentle version akin to Sasha would be Lyosha).

el mes pasadodiscuss

[dead]

el mes pasadodiscuss

Proposed mitigations look weak:

- DNS block & SNI filtering: I expect BrightData to rotate the endpoints if this issues gains enough attention. It will take some time once all the apps embedding the SDK catch up, but if they're smart SDK may already have a backup C&C connection they will try to reach out to after prolonged unavailability of the current endpoints.

- TLS fingerprint: unless SDK pins it, it's the cheapest one to rotate continously.

- MDM solution: almost unattainable to private users; not clear how stable the SDK name is to rely on.

Not saying I have a better approach. It seems behavior like this should be explicitly banned on Apple/Google's side with immediate termination of their publisher accounts.

el mes pasadodiscuss

I tried Darktable and I don't doubt it's a powerful RAW editing software but it feels like to be effective with it you need to care about the software more than you do about photography. With Lightroom/Capture One etc. it's the opposite. Darktable is just too 'out there'

el mes pasadodiscuss

Looking for a REMOTE contract or full-time work:

  Location: Japan (Kobe)
  Remote: yes, with this time overlap for synchronous work:
    - PT: 15:00~22:00  &  06:00~08:00
    - CT: 17:00~24:00  &  08:00~10:00
    - ET: 18:00~01:00  &  09:00~11:00
  Willing to relocate: within Japan only
  Technologies: AWS, GCP, Terraform, k8s, Python, Go, PHP, Alpine, Debian, Ubuntu, PgSQL, MySQL, Wireguard
  Résumé/CV: https://assets.maxgv.dev/cv/Resume_MaxGashkov_2026.pdf
  Email: [email protected]
  Linkedin: https://www.linkedin.com/in/maxgashkov/

Mostly looking for infrastructure-related work (cloud or on-prem). If you struggle with your cloud bill, do reach out to me.

Will also manage a focused engineering team if needed.

Curious/optimistic about LLMs.

el mes pasadodiscuss

At this point I'd take anything but my guess is this will make windshield quite more expensive (and it's already not cheap to replace it due to the sensor array calibration on most newer cars).

el mes pasadodiscuss

I pray for the next major development in glasses tech to be some thing that blocks ultra-bright oncoming LEDs while driving.

hace 2 mesesdiscuss

Negative feedback is not lost, it's filtered. No one at the top is equipped to deal with the actual feedback from ICs, unless your org is 10 people in a bike shed.

hace 2 mesesdiscuss

This is not about enjoying or not enjoying jail. If you happen to live and work in Japan in a typical job, getting arrested and held within this process for 23 days almost certainly means you're getting fired because you essentially have no contact with the outside world and even if you manage to sneak a word out through your lawyer, most of the employment contracts have clauses to extent of automatic termination for both missing enough days and breaking moral character.

So even if the prosecution decides to drop your case, you're already fucked -- this is not how proper justice system should work.

hace 2 mesesdiscuss

I'm on a fence about this.

First, the biggest issue r/n is the concern that external internet will be limited to a point of no return, for this meshtastic is quite useless because to go across the border you need powerful transmitters and risk of placing and maintaining them near the border. In russia this is not only risk of going to prison but also being literally shot if border patrol/FSB overreacts. Even if you're successful bandwidth is miniscule compared to what a modern country needs to communicate internationally.

Second, due to Ukraine piggybacking on cellular networks for drone targeting/control cell service is frequently disrupted by authorities in the areas of a likely attack (it's obviously as effective as this sounds compounded by general incompetence of the government). While they cannot shut it down completely because russia still doesn't want to go back to the stone age, this concern is largely non-existent for meshtastic though. If it becomes widely popular and coverage expands, it also could be used by Ukraine as a control network, and in this case I would expect russian authorities to just jam the whole frequency range and be done with it. So the moment it becomes viable alternative is the moment it will be shut down.

hace 2 mesesdiscuss

One of the use cases is pairing it up with ATAK or similar tactical awareness system during SAR operations by volunteer brigades in remote areas with spotty coverage by regular networks.

More info here if someone's interested: https://www.civtak.org/

hace 2 mesesdiscuss

As of now, OpenRouter offers multiple providers for DeepSeek with ZDR (not sure if they respect it but still).

hace 2 mesesdiscuss

They absolutely are. Fun example: when Revolut launched in Japan few years back they had a period of a relatively explosive success (especially within the immigrant community), so most of the cards of the period were issued with the same expiration month and with the same IIN (I'm assuming specific to Japan as well) which left very little entropy and lead to brute-force attacks via merchants not requiring 3DS (Uber etc.). Within only one community (approx. 1.5k people) we have had a handful of a 100% verified cases when the card was compromised without any exposure at all (i.e. the card was not used online or offline).

In all cases Revolut promptly reverted the charges and eventually they did a complete reissue of the cards for Japanese market (not sure how they've got around the entropy issue: maybe they've randomized the expiry dates or spread out IINs some more).

hace 3 mesesdiscuss

Not sure why your comment is downvoted, because it hits the issue dead center, namely it's completely possible to pass either of the required tests (N2/J2) and not being able to speak a single word of Japanese in a live conversation.

That's why at least one category of applicants abusing the visa (Chinese) will continue to do so without any issues.

hace 4 mesesdiscuss

None of them are 'good'. Execs at Anthropic just perceive the long-term damage from a potential Snowden-level leak showing how their model directed a drone strike against a bunch of civilians higher than short-term loss of revenue from the DoD contracts.

hace 7 mesesdiscuss

Thank god. The only remaining failure mode I’ve seen with LE certs recently is API key used to manipulate DNS records for the DNS-01 challenge via some provider (Cloudflare etc.) expiring or being disabled during improper user offboarding.